To set up light forwarding, perform the following steps: See the topic "Configure forwarders with nf" for more information. In addition, if you will be enabling and configuring a number of forwarders, you can easily accomplish this by editing a single nf file and making a copy for each forwarder. Most advanced configuration options are available only through nf. Although setting up forwarders with nf requires a bit more initial knowledge, there are obvious advantages to performing all forwarder configurations in a single location. You can also enable, as well as configure, forwarding by creating an nf file on the Splunk instance. You can use the CLI as a quick way to enable forwarding. For more information, see Types of Splunk licenses. Note: When you configure a Splunk instance as a light forwarder, select the forwarder license. ![]() Install a full Splunk Enterprise instance.Setting up a light forwarder is a two-step process: You can then set up forwarders to send data to that receiver. The receiver receives the data and the forwarder sends data to the receiver.Ī Splunk best practice is to set up the receiver first. To enable forwarding and receiving, configure both a receiver and a forwarder. For information on how to install a universal forwarder, which is the recommended replacement for the light forwarder, see Install the universal forwarder software in the Universal Forwarder manual. ![]() You can install a light forwarder on a full Splunk Enterprise instance. For a list of all deprecated features, see Deprecated features in the Release Notes. The light forwarder was deprecated in Splunk Enterprise version 6.0.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |